@inproceedings{ gao_scada_2010,
  title = {On {SCADA} control system command and response injection and intrusion detection},
  doi = {10.1109/ecrime.2010.5706699},
  abstract = {SCADA systems are widely used in critical infrastructure sectors, including electricity generation and distribution, oil and gas production and distribution, and water treatment and distribution. SCADA process control systems are typically isolated from the internet via firewalls. However, they may still be subject to illicit cyber penetrations and may be subject to cyber threats from disgruntled insiders. We have developed a set of command injection, data injection, and denial of service attacks which leverage the lack of authentication in many common control system communication protocols including MODBUS, DNP3, and EtherNET/IP. We used these exploits to aid in development of a neural network based intrusion detection system which monitors control system physical behavior to detect artifacts of command and response injection attacks. Finally, we present intrusion detection accuracy results for our neural network based IDS which includes input features derived from physical properties of the control system.},
  booktitle = {{eCrime} {Researchers} {Summit} ({eCrime}), 2010},
  author = {Gao, Wei and Morris, T. and Reaves, B. and Richey, D.},
  month = {October},
  year = {2010},
  keywords = {Chemicals, DNP3, EtherNET/IP, Ethernet networks, IP networks, Internet, MODBUS, Monitoring, Protocols, Registers, SCADA control system, SCADA systems, Security, authorisation, computer crime, control system communication protocol, critical infrastructure sector, critical infrastructures, cyber security, cyber threat, data injection, denial of service attack, electricity generation, firewall, intrusion detection, neural nets, neural network, oil and gas production, water distribution, water treatment},
  pages = {1--9}
}

{"_id":"zf9vwEim3w3FvsFce","bibbaseid":"gao-morris-reaves-richey-onscadacontrolsystemcommandandresponseinjectionandintrusiondetection-2010","downloads":0,"creationDate":"2015-04-22T00:15:34.070Z","title":"On SCADA control system command and response injection and intrusion detection","author_short":["Gao, W.","Morris, T.","Reaves, B.","Richey, D."],"year":2010,"bibtype":"inproceedings","biburl":"http://bibbase.org/zotero/ealprr","bibdata":{"abstract":"SCADA systems are widely used in critical infrastructure sectors, including electricity generation and distribution, oil and gas production and distribution, and water treatment and distribution. SCADA process control systems are typically isolated from the internet via firewalls. However, they may still be subject to illicit cyber penetrations and may be subject to cyber threats from disgruntled insiders. We have developed a set of command injection, data injection, and denial of service attacks which leverage the lack of authentication in many common control system communication protocols including MODBUS, DNP3, and EtherNET/IP. We used these exploits to aid in development of a neural network based intrusion detection system which monitors control system physical behavior to detect artifacts of command and response injection attacks. Finally, we present intrusion detection accuracy results for our neural network based IDS which includes input features derived from physical properties of the control system.","author":["Gao, Wei","Morris, T.","Reaves, B.","Richey, D."],"author_short":["Gao, W.","Morris, T.","Reaves, B.","Richey, D."],"bibtex":"@inproceedings{ gao_scada_2010,\n title = {On {SCADA} control system command and response injection and intrusion detection},\n doi = {10.1109/ecrime.2010.5706699},\n abstract = {SCADA systems are widely used in critical infrastructure sectors, including electricity generation and distribution, oil and gas production and distribution, and water treatment and distribution. SCADA process control systems are typically isolated from the internet via firewalls. However, they may still be subject to illicit cyber penetrations and may be subject to cyber threats from disgruntled insiders. We have developed a set of command injection, data injection, and denial of service attacks which leverage the lack of authentication in many common control system communication protocols including MODBUS, DNP3, and EtherNET/IP. We used these exploits to aid in development of a neural network based intrusion detection system which monitors control system physical behavior to detect artifacts of command and response injection attacks. Finally, we present intrusion detection accuracy results for our neural network based IDS which includes input features derived from physical properties of the control system.},\n booktitle = {{eCrime} {Researchers} {Summit} ({eCrime}), 2010},\n author = {Gao, Wei and Morris, T. and Reaves, B. and Richey, D.},\n month = {October},\n year = {2010},\n keywords = {Chemicals, DNP3, EtherNET/IP, Ethernet networks, IP networks, Internet, MODBUS, Monitoring, Protocols, Registers, SCADA control system, SCADA systems, Security, authorisation, computer crime, control system communication protocol, critical infrastructure sector, critical infrastructures, cyber security, cyber threat, data injection, denial of service attack, electricity generation, firewall, intrusion detection, neural nets, neural network, oil and gas production, water distribution, water treatment},\n pages = {1--9}\n}","bibtype":"inproceedings","booktitle":"eCrime Researchers Summit (eCrime), 2010","doi":"10.1109/ecrime.2010.5706699","id":"gao_scada_2010","key":"gao_scada_2010","keywords":"Chemicals, DNP3, EtherNET/IP, Ethernet networks, IP networks, Internet, MODBUS, Monitoring, Protocols, Registers, SCADA control system, SCADA systems, Security, authorisation, computer crime, control system communication protocol, critical infrastructure sector, critical infrastructures, cyber security, cyber threat, data injection, denial of service attack, electricity generation, firewall, intrusion detection, neural nets, neural network, oil and gas production, water distribution, water treatment","month":"October","pages":"1--9","title":"On SCADA control system command and response injection and intrusion detection","type":"inproceedings","year":"2010","bibbaseid":"gao-morris-reaves-richey-onscadacontrolsystemcommandandresponseinjectionandintrusiondetection-2010","role":"author","urls":{},"keyword":["Chemicals","DNP3","EtherNET/IP","Ethernet networks","IP networks","Internet","MODBUS","Monitoring","Protocols","Registers","SCADA control system","SCADA systems","Security","authorisation","computer crime","control system communication protocol","critical infrastructure sector","critical infrastructures","cyber security","cyber threat","data injection","denial of service attack","electricity generation","firewall","intrusion detection","neural nets","neural network","oil and gas production","water distribution","water treatment"],"downloads":0},"search_terms":["scada","control","system","command","response","injection","intrusion","detection","gao","morris","reaves","richey"],"keywords":["chemicals","dnp3","ethernet/ip","ethernet networks","ip networks","internet","modbus","monitoring","protocols","registers","scada control system","scada systems","security","authorisation","computer crime","control system communication protocol","critical infrastructure sector","critical infrastructures","cyber security","cyber threat","data injection","denial of service attack","electricity generation","firewall","intrusion detection","neural nets","neural network","oil and gas production","water distribution","water treatment"],"authorIDs":[],"dataSources":["fcy64Zdm28gydMmuE"]}